aim Pass 2.0
(Backdoor.Win32.AimPass.20)

by moo2

Released in April 2004


server





Server:
dropped file:
c:\WINNT\system32\servername.exe

size: 270.656 bytes

port: 4444 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "servername"
data: C:\WINNT\system32\servername.exe
 
tested on Win2000

MegaSecurity